321 matches found
TP_LINK-TD-W8901G suffers from weak password vulnerability
TPLINK-TD-W8901G is a wireless router. The TPLINK-TD-W8901G suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...
TP-Link多款产品 跨站脚本漏洞
Tp-link TP-Link Wireless Router Archer Router is a wireless router from China P&L Tp-link. A cross-site scripting vulnerability exists in several TP-Link products, which stems from improper authentication via hostname and affects the following products and versions: TD-W9977v1, TL-WA801NDv5,...
CVE-2021-3275: Improper Neutralization of Input During Web Page Generation
Unauthenticated stored cross-site scripting XSS exists in multiple TP-Link products including WIFI Routers Wireless AC routers, Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper...
CVE-2021-22300
There is an information leak vulnerability in eCNS280TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods...
PT-2021-14938
Name of the Vulnerable Software and Affected Versions: eCNS280 TD versions V100R005C00 and V100R005C10 Description: The issue is related to an information leak. A command lacks a timeout exit mechanism, and temporary files contain sensitive information. This allows attackers to obtain information...
Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission Vulnerability
Exploit Title: Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission Exploit Author: Adrian Bondocea Vendor Homepage: https://www.fluentd.org/ Software Link: https://td-agent-package-browser.herokuapp.com/4/windows Version: icacls C:\opt\td-agent\bin C:\opt\td-agent\bin...
Fluentd TD-agent 4.0.1 Insecure Folder Permission
Exploit Title: Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission Date: 21.12.2020 Exploit Author: Adrian Bondocea Vendor Homepage: https://www.fluentd.org/ Software Link: https://td-agent-package-browser.herokuapp.com/4/windows Version: icacls C:\opt\td-agent\bin C:\opt\td-agent\bin...
Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission
Exploit Title: Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission Date: 21.12.2020 Exploit Author: Adrian Bondocea Vendor Homepage: https://www.fluentd.org/ Software Link: https://td-agent-package-browser.herokuapp.com/4/windows Version: icacls C:\opt\td-agent\bin C:\opt\td-agent\bin...
CVE-2020-28169
The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM...
CVE-2020-28169
The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM...
CVE-2020-28169: Incorrect Permission Assignment for Critical Resource
The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM...
Kenhys Td Agent Builder Permission License and Access Control Issues Vulnerability
Kenhys Td Agent Builder is a Ruby-based software for collecting various types of log information by the individual developer Kenhys. Fluentd td-agent-builder plugin before 2020-12-18 A security vulnerability exists that could be exploited by an attacker to gain privileges because the bin director...
PT-2020-16936
Name of the Vulnerable Software and Affected Versions td-agent-builder plugin for Fluentd versions prior to 2020-12-18 Description The issue allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITYSYSTEM...
VulnCheck KEV: CVE-2013-6023
Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. dot dot in the URI...
td-korada.si Cross Site Scripting vulnerability OBB-1456395
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
QEMU infinite loop vulnerability
QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. An infinite loop vulnerability exists in hw/usb/hcd-ohci.c in QEMU 5.0.0 when the TD list has a loop. An attacker can exploit this...
CVE-2020-25625
hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...
Code injection
hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...
